Behavioral task
behavioral1
Sample
bd7887c32d3b6b59305ca829c2ea6779_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd7887c32d3b6b59305ca829c2ea6779_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd7887c32d3b6b59305ca829c2ea6779_JaffaCakes118
-
Size
192KB
-
MD5
bd7887c32d3b6b59305ca829c2ea6779
-
SHA1
32d7ea3fd7006fa5f215beff0f9df1094830423e
-
SHA256
2cf35d597c1e2e4b84ff4ddde5481425608c77d52546c7f59fbf67e7773ef051
-
SHA512
1af6a0ed360e4e5e6a071dc96ebd1f7313f8cfdafada551bc681765b2e53dfd2c87026ced9e14bb6f51ecb968f8d6fe97eb46267570a9a7c76edbffea4175503
-
SSDEEP
6144:FZLoudZzFE0jvxBpKWZ0RgII+7Nfr4KxVvvEKy:FptzW4xmWZ0vV7NTpVkKy
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd7887c32d3b6b59305ca829c2ea6779_JaffaCakes118
Files
-
bd7887c32d3b6b59305ca829c2ea6779_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 592KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE